[OpenAFS] Password transition to krb5 - your methods?

Jeff Blaine jblaine@kickflop.net
Thu, 25 Oct 2007 10:53:28 -0400

Steve Devine wrote:
> Jeff Blaine wrote:
>> I realize there's not a conversion process to get AFS krb4
>> principal passwords into krb5-land.
>> What approaches have you all taken in order to make the
>> kaserver -> krb5 KDC transition as painless as possible
>> to users?
>> Thanks for any insight/tips.
> This is not so.
>  From my notes :
> ***********************************
> afs2k5db /usr/afs/db/kaserver.DB0 >all.out
> then edit the all.out file:
> Remove line for AuthServer , krbtgt, and afs
> Be sure and leave in first line ( kdb5_util load_dump version 4)
> Then load em all in.
> kdb5_util load -update all.out
> (Leave verbose switch out it will just slow you down.)
> ********************************

I assume that's a Heimdal installation?

I should have clarified in the original post: MIT Kerberos.

Or is everyone using Heimdal with OpenAFS?